Changelog v23.03.3

Changes from v23.03.2 to v23.03.3

  • 589eb8a1 Set release date for 23.03.3.
  • fec1ad85 controller: Set check_tnl_key for BFD on tunnel ifaces.
  • 907e4ef9 tests: Skip EDNS test if the scapy version doesn’t support it.
  • f33155c7 northd: Don’t skip the unSNAT stage for traffic towards VIPs.
  • 8c4995fc northd: Don’t create fair Sb meters for ACLs with logging disabled.
  • 085377fa controller: ofctrl: Use index for meter lookups.
  • 1ad4d742 tests: Fix “router port type update and then …”.
  • 0314ffa2 tests: Fix “ovn-controller - Chassis other_config”.
  • 677d4d80 tests: Fix “ofctrl wait before clearing flows”.
  • b2afef4f tests: Fix flaky “ovn-controller-vtep - binding 1”.
  • 080bf284 tests: Fix flaky “options:requested-chassis …”.
  • 95685640 tests: Fix typos in tests.
  • 187d0d4f tests: Have tests fail when adding veth peer fails.
  • cb0c9185 pinctrl: dns: Ignore additional records.
  • 6c15e96f ovn-ic: Fix global blacklist filter for IPv6 addresses.
  • d74c2ce0 tests: Fix macro OVN_CHECK_PACKETS_CONTAIN.
  • 5538fe72 features.c: Always wait on the rconn.
  • 21956ff2 Documentation: Fix broken links in ovn-sandbox.rst.
  • 1cd23bcf ovn-sb.xml: Remove IPv4-only restriction from Service Monitors.
  • f97a7ba9 github: Update versions of action dependencies (Node.js 20).
  • c4ae1857 northd: Remove the protocol match from ECMP symmetric reply flows.
  • 09e6a814 actions: Use random port selection for SNAT with external_port_range.
  • bea7dde2 ovn-ic: Handle NB:name updates properly.
  • 591a0a22 Fix segfault due to ssl-ciphers.
  • 7f1681b1 controller: fixed potential segfault when changing tunnel_key and deleting ls.
  • 56a75521 northd: Use proper field for lookup_nd
  • 6be3e893 checkpatch.py: Port checkpatch related changes from the OVS repo.
  • 5c4465f0 actions: Make sure affinity learnt flows are auto deleted.
  • 285564dc pinctrl: Directly retrieve desired port_binding MAC.
  • c513eb91 test: add dedicated test for garp-max-timeout
  • f1d37a37 treewide: Fix small memory leaks reported by static analysis
  • 32fd3332 ovs: Bump submodule to include IDL “spurious delete” fix.
  • 67153656 Correct ethtype referencing incorrect values
  • 45dfd8be northd: forward arp request to lrp snat on.
  • f38d6c0b ovn-macros: Make sure stopped daemons continue before the test ends.
  • 8abd0082 system-test: Fix tcpdump usage in LB template tests.
  • 26a91f1a controller: make garp_max_timeout configurable
  • 01d85f35 system-tests: Consolidate wait condition in CoPP test
  • 0865b780 pinctrl: Fix up comments about sending RST packets for healthcheck.
  • 95d426d0 fmt_pkt: make sure scapy-server is started once
  • e939fb39 fmt_pkt: improve scapy-server logging
  • 9b80a40e fmt_pkt: use -S check to wait for scapy sock file
  • 233d59bf fmt_pkt: don’t subshell when calling ovs-appctl
  • 9a428e2b controller: fix group_table and meter_table allocation
  • ee3dc050 controller: avoid extra flows if localnet_learn_fdb is disabled
  • b76da8a7 controller: FDB entries for localnet should not overwrite entries for vifs
  • 378d608f pinctrl: reset success and failures n_count regardless of svc state
  • 091fde81 pinctrl: send RST instead of RST_ACK bit for lb hc
  • a497e552 controller: Don’t artificially limit group and meter IDs to 16bit.
  • e060ec3a tests: fixed race_condition with max_prefix
  • 740e0d2a tests: fixed “ovn-nbctl - daemon retry connection”
  • 07fa9051 tests: fixed system test “LR with SNAT fragmentation needed for external server”.
  • 95be0768 ovn-ctl man: Add election timer config to manpage
  • 6c15f7b7 controller: have I+P assigning ct_zones for l3gateway ports
  • 5479f034 tests: fixed another set of flaky ovn-ic tests
  • 6a9ac409 tests: wait for all flows to be installed before sending packets
  • dcc31854 tests: fixed “ipsec – basic configuration”
  • 3f7845d4 tests: do not start backup-northd by default
  • 38e73eb8 tests: fixed multiple tests not properly waiting for packets to be received
  • ede9954a ci: Pin Python, Fedora and Ubuntu runner versions.
  • b0d658bc ovs: Bump submodule to include E721 fixes.
  • a51ef9ba tests: Remove broken “feature inactivity probe” test.
  • 51e35c15 ovs: Bump submodule to v3.1.3.
  • 9f3d494e py-requirements: Remove hacking dependency and use recent flake8.
  • 1f09eaa4 controller, northd: Wait for cleanup before replying to exit
  • 6627389a tests: Add missing check for scapy.
  • a43d6dc4 ci: Apply the ASAN workaround only for Clang <16
  • 72461e96 ci: Use proper uname argument to get the HW type
  • 0213101b tests: Wait for new ovn-controllers to connect to Southbound.
  • e0923a6d system-tests: Make sure that IPv6 address is available right away
  • e1657ff3 Don’t mention packet cloning when failing to find tunnel
  • c223dd86 northd: Allow need frag to be SNATed
  • 8d5ca8b6 docs: require ovn-set-local-ip for co-located ovn-controllers
  • 658f8ef5 memory-trim: Fix timestamp overflow warning right after reboot.
  • 7ef8a937 Fix missing flows in ls_in_dhcp_options table
  • 7fad2584 controller: throttle port claim attempts from if-status
  • 69b8d8ba tests: fixed “send gratuitous ARP for NAT rules on HA distributed router”
  • 45b3946d tests: move trim_zeros() to ovn-macros
  • 6ec80d26 tests: fixed “L2 Drop and Allow ACL w/ Stateful ACL”
  • 7c0ed671 tests: fixed multiple tests missing ovn-nbctl “wait”
  • 8aebd7bf tests: fixed “options:requested-chassis for logical port”
  • 801ec270 tests: fixed “Logical router policy packet marking”
  • 8115b603 tests: fixed multiple ovn-ic tests
  • 6a950fb4 pinctrl: Reply with correct destination for ICMPv6 RA packets
  • c5491c31 ovn-controller: Add monitor condition for FDB.
  • 24c505ef Rename scapy-server into scapy-server.py
  • d522eaa2 Add ovnkube-identity binary to the ovn-kubernetes Dockerfile
  • a811fd6c tests: offload scapy transformations to a separate unixctl daemon
  • d1c3b730 Prepare for 23.03.3.